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DETAILED ACTION 

1 . This Office Action is in response to the apphcation 1 0/506,943 filed on 09/08/2004. 

2. As per the Preliminary Amendment filed on 09/08/2004, claims 1-45 were canceled; claims 
46-76 are newly added; claims 46, 59, and 69 are independent claims. 

Claims 46-76 have been examined and are pending. 

Claim Objections 

3. Claims 50-52, 57-58, 63-66, and 73-76 are objected to under CFR 1.75(c) because of the 
following informalities: 

• Regarding claims 50, 64, and 74, the acronyms 'GSM' and 'SIM' are used 
without spelling out in fiill at their first occurrences in the claims. 

• Regarding claims 51, 65, and 75, the acronyms 'UMTS' and 'USIM' are used 
without spelling out in fiiU at their first occurrences in the claims. 

• Regarding claims 52, 66, and 76, the acronyms 'WPKI' and 'WIM' are used 

without spelling out in full at their first occurrences in the claims. 

• Regarding claim 57, the acronyms 'SIM', 'USIM', and 'HMAC are used 
without spelling out in fiiU at their first occurrences in the claim. 

• Regarding claims 58, 63, and 73, the acronym 'HMAC is used without 
spelling out in fiiU at its first occurrence in the claims. 

• Regarding claim 64, the claim recites "the electronic communication apparatus 
according to claim 14;" However, there is no claim 14 was canceled. For the purpose of 
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applying art, the Examiner interprets it to mean ''the electronic communication apparatus 
according to claim 59. " (emphasis added). 

• Regarding claims 75 and 76, the claims recite "the server according to claim 
24;" However, there is no claim 24 was canceled. For the purpose of applying art, the 
Examiner interprets it to mean "the electronic communication apparatus according to 
claim 69. " (emphasis added). 

• Regarding claims 73-76, the numbering of claims is not in accordance with 37 
CFR 1.126 which requires the original numbering of the claims to be preserved throughout 
the prosecution. When claims are canceled, the remaining claims must not be renumbered. 
When new claims are presented, they must be numbered consecutively beginning with the 
number next following the highest numbered claims previously presented (whether entered 
or not), (emphasis added). Claim 72 is missing in this application. 

Appropriate corrections are required. 

Claim Rejections - 35 USC § 101 

4. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

• Claim 69 is rejected under 35 U.S.C. 101 because the claim may be directed to 
non-statutory subject matter. Although the preamble of the claim recites "a server," the 
body of the claim may be directed to software implementation since "means for 
incorporating an authentication method" and "means for determining authentication 
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method" could be implemented by software by one of ordinary skill in the art at the time 
the invention was made. Therefore, the claimed subject matter does not belong to any of 
the four statutory categories set forth above. 

Claim Rejections - 35 USC § 102 

5. The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in pubhc use or 
on sale in this country, more than one year prior to the date of appUcation for patent in the United States. 

6. Claims 46-49, 54-56, 59-62, and 67-71 are rejected under 35 U.S.C. 102(b) as being 
anticipated by "SyncML Sync Protocol, version 1.0," (hereinafter "SyncML"), SYNCML 
CONSORTIUM, published on December 07, 2000. 

• Regarding claim 46, SyncML discloses a method for providing authentication 
when messages are sent between an electronic communication apparatus and a server 
according to a synchronization protocol (page 8, Fig. 2; page 20, section 3: 
authentication), comprising: 

providing an authentication method indicator (page 21, section 3.5.1; XML Tag 
'type '; page 13, section 2.5) that specifies an authentication method according to which the 
authentication is to be executed (page 20, section 3; page 21, section 3.5; XML Tag 
'SyncML' and 'VerDTD' ); 

incorporating into a message the authentication method indicator (page 21, 
section 3.5.1; XML Tag 'type'; page 13, section 2.5) comprising a plurality of 
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authentication capabilities of the communication apparatus (page 13, section 2.5; the 
protocol requires the support for the basic authentication and the MD5 digest access 
authentication; see also page 20, section 3; page 21, section 3.5.1; XML Tag 'type ' <auth- 
basic>; page 23; XML Tag 'type' <auth-md5>); and 

transmitting said message to said server according to an authentication protocol 
of the synchronization protocol (page 22; Pkg #1 (with credentials) from client; data inside 
XML Tag 'type '<auth-basic>; see also page 23; Pkg #1 (with credentials from Client; 
syncML: auth-md5). 

• Regarding claim 47, SyncML discloses the method according to claim 46, 
wherein the authentication method indicator is incorporated into a meta command of the 
synchronization protocol (page 22, Pkg #1 (with credentials) from Client; XML Tag 'Meta ' 
includes <auth-basic>; see also page 23; Pkg #/ (with credentials) from Client). 

• Regarding claim 48, SyncML discloses the method according to claim 46, 
wherein the message is an initialization message (pages 22-25; Pkg #1 (with credentials) 
from Client; Fig. 6; Pkg #1: client initialization package to server), and the authentication 

capabilities of the electronic communication apparatus is indicated in an authentication 
method list of the initialization message (page 15, section 2. 7; pages 22-24, section 3.5; 
pages 25-27, section 4), which is sent to the server for establishing a connection (page 25; 
Fig. 6; Pkg #1: client initialization package to server). 

• Regarding claim 49, SyncML discloses the method according to claim 46, 
wherein any authentication data relating to the specified authentication method is 
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incorporated in a data string of the message-sent according to the synchronization protocol 
(page 21, section 3.5; the client sends Pkg #1 with the credentials; the server accepts the 
credentials and the session is authenticated; see also page 25; Fig. 6). 

• Regarding claim 54, SyncML discloses the method according to claim 48, 
further comprising: determining at the server the authentication capabilities of the 

electronic communication apparatus based on the plurality of authentication capabilities 
listed in the authentication method list (page 20, section 3.1-3.3; page 21, section 3.5.1; the 
client sends Pkg #1 with credentials; the server accepts the credentials and the session is 
authenticated; see also pages 22-23; Pkg #1 (with credentials) from Client; information 
inside XML Tag 'type' includes <auth-basic> and <auth-md5>). 

• Regarding claim 55, SyncML discloses the method according to claim 54, 
flirther comprising: 

executing at the server authentication operations according to one of the plurality 
of authentication capabilities indicated in the authentication method list (page 21, section 
3.5; the client sends Pkg #1 with the credentials; the server accepts the credentials and the 
session is authenticated; see also page 25; Fig. 6); 

preparing a message at the server comprising the authentication method indicator 
and any authentication data relating to the specified authentication method (pages 21-23; 
see Pkg #2 from server); and 

transmitting the message to the electronic communication apparatus (page 25, 
Fig. 6; Pkg #2: server initialization package to client). 
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• Regarding claim 56, SyncML discloses the method according to claim 55, 
further comprising: 

receiving the message at the electronic communication apparatus (page 25; Fig. 
6; server initialization package to client); 

executing, at the electronic communication apparatus, authentication operations 
according to the authentication method indicated by the authentication method indicator to 
generate an expected result (page 21, section 3.5; the client sends Pkg #1 with the 
credentials; the server accepts the credentials and the session is authenticated; see also 
page 25; Fig. 6); 

preparing a response to the server comprising the authentication method 
indicator, and any authentication data (page 26, section 4.1; initialization requirements for 
client; see also page 33; Fig. 7; client makes data update for its databases); and 

transmitting the response to the server (page 26, section 4.1; initialization 
requirements for client; see also page 33; Fig. 7; client sends server Pkg #5, data update 
status package) . 

• Regarding claim 59, claim 59 is similar in scope to claim 1, and is therefore 
rejected under similar rationale. 

• Regarding claim 60, SyncML discloses the electronic communication apparatus 
according to claim 59, further comprising: means for sending an initialization message to 
the server for establishing a connection, the message comprising the authentication method 
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indicator (pages 22-25; Pkg #1 (with credentials) from Client; Fig. 6; Pkg #1: client 
initialization package to server). 

• Regarding claim 61, SyncML discloses the electronic communication apparatus 
according to claim 60, wherein the initialization message further comprises type of 
apparatus and/or identity of the electronic communication apparatus (pages 27-28, section 
4.1.1; XML Tags 'PropName ' includes <TEL>, <VOICE>, and <CELL>; see also page 
31; XML Tags 'PropName'). 

• Regarding claim 62, SyncML discloses the electronic communication apparatus 
according to claim 61, further comprising: means for incorporating authentication data in a 
data string of the message to be sent according to the synchronization protocol (page 21, 
section 3.5; the client sends Pkg #1 with the credentials; the server accepts the credentials 
and the session is authenticated; see also page 25; Fig. 6). 

• Regarding claim 67, SyncML discloses the electronic communication apparatus 
according to claim 59, wherein the electronic communication apparatus is a pager, an 
electronic organizer, and/or a smartphone (page 8, section SyncML Client; the SyncML 
client is typically a mobile phone, PC, or PDA device; see also Fig. 2; synchronization 
example with mobile phone and server). 

• Regarding claim 68, SyncML discloses the electronic communication apparatus 

according to claim 59, wherein the electronic communication apparatus is a mobile 
telephone (page 8; Fig. 2; synchronization example with mobile phone and server). 
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• Regarding claim 69, SyncML discloses a server, comprising: 

means for incorporating an authentication method indicator in a message to be 
sent (page 20, section 3; the authentication procedure are defined for the basic and MD5 
digest access authentication and both of them must be supported by the devices; page 21, 
section 3.5.1; Pkg #1 from Client and Pkg #2 from Server) according to an authentication 
protocol of a synchronization protocol for indicating an authentication method according to 
which the authentication is to be executed (page 21; section 3.5.1; page 22; Pkg #1 from 
(with credentials) from Client and Pkg #2 from Server); 

means for determining from the authentication method indicator of a received 
message a plurality of authentication capabilities of an apparatus (pages 22-23; Pkg #1 
(with credentials) from Client; information inside XML Tag 'type ' includes <auth-basic> 
and <auth-md5>); and 

means for determining the authentication method to use based on the plurality of 
authentication capabilities (page 20, section 3.1-3.3; page 21, section 3.5.1; the client 
sends Pkg #1 with credentials; the server accepts the credentials and the session is 
authenticated). 

• Regarding claim 70, is similar in scope to claim 62, and is therefore rejected 
under similar rationale. 

• Regarding claim 71, SyncML discloses the server according to claim 69, 
further comprising: means for executing authentication according to the determined 
authentication method (page 21, section 3.5; the client sends Pkg #1 with the credentials; 
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the server accepts the credentials and the session is authenticated; see also page 25; Fig. 
6). 

Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

8. This application currently names joint inventors. In considering patentability of the claims 
under 35 U.S.C. 103(a), the examiner presumes that the subject matter of the various claims 
was commonly owned at the time any inventions covered therein were made absent any 
evidence to the contrary. Applicant is advised of the obligation under 37 CFR 1 .56 to point 
out the inventor and invention dates of each claim that was not commonly owned at the time 
a later invention was made in order for the examiner to consider the applicability of 35 
U.S.C. 103(c) and potential 35 U.S.C. 102(e), (f) or (g) prior art under 35 U.S.C. 103(a). 

9. Claims 50-51, 57, 63-65, and 73-75 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over SyncML, as applied to claims 46, 59, and 69 above, and further in view 
of Quick, Jr. et al. (hereinafter "Quick"), U.S. Patent Application No. 2002/0091933, filed 
on May 22, 2001. 

• Regarding claim 50, SyncML discloses the method according to claim 46. 
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SyimML does not explicitly disclose the authentication method is GSM SIM 
authentication. 

However, in an analogous art. Quick discloses a method for providing local 
authentication, wherein the authentication method is GSM SIM authentication (pars. 0005- 
0006; Subscriber Identity Module (SIM) is used in GSM system; an authentication key for 
identifying the subscriber). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to combine the method and system of Quick with that of 
SyncML wherein the authentication method is GSM SIM authentication to allows a 
subscriber to travel without his or her personal mobile phone and to use locally available 
mobile phone without incurring costs in establishing a new account (par. 0005). 

• Regarding claim 51, SyncML discloses the method according to claim 46. 

SyncML does not explicitly disclose the authentication method is UMTS USIM 
authentication, which provides server authentication. 

However, in an analogous art, Quick discloses a method for providing local 
authentication, wherein the authentication method is UMTS USIM authentication, which 
provides server authentication (pars. 0005 and 0006; next generation SIM card have been 
renamed as USIM used in UTMS system; an authentication key for identifying the 
subscriber). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to combine the method and system of Quick with that of 
SyncML wherein the authentication method is UMTS USIM authentication, which 
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provides server authentication to allows a subscriber to travel without his or her personal 
mobile phone and to use locally available mobile phone without incurring costs in 
establishing a new account (par. 0005). 

• Regarding claim 57, SyncML discloses the method according to claim 46. 
SyncML does not explicitly disclose the authentication method is SIM/USIM 

authentication, the method further comprising: using CKs/IKs (cipher keys/integrity keys) 
generated by the electronic communication apparatus and the server, respectively, to 
provide integrity protection, wherein the CKs/IKs are used for generating MAC values; and 
using a hashing function for computing a HMAC on the message. 

However, in an analogous art, Quick discloses a method for providing local 
authentication, wherein the authentication method is SIM/USIM authentication, the method 
fiirther comprising: using CKs/IKs (cipher keys/integrity keys) generated by the electronic 
communication apparatus and the server, respectively, to provide integrity protection (pars. 
0024 and 0026-0027; cipherkey 290 and integrity key 310), wherein the CKs/IKs are used 
for generating MAC values (pars. 0026; the IK 310 can be used to generate a message 
authentication code MAC); and using a hashing function for computing a HMAC on the 
message (par. 0038; HMAC-SHA-1 scheme; HMAC is implemented in the subscriber 
identification token). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to combine the method and system of Quick with that of 
SyncML wherein the authentication method is SIM/USIM authentication, the method 
further comprising: using CKs/IBCs (cipher keys/integrity keys) generated by the electronic 
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communication apparatus and the server, respectively, to provide integrity protection, 
wherein the CKs/IBCs are used for generating MAC values; and using a hashing function for 
computing a HMAC on the message to provide users with a mean for providing secure 
authentication to a subscriber roaming outside his or her home system (par. 0007). 

• Regarding claim 63, SyncML discloses the electronic communication apparatus 
according to claim 59. 

SyncML does not exphcitly disclose means for using an IK (integrity key) to 
generate a MAC to provide integrity protection; and means for using a hashing fimction to 
compute a HMAC on the message to be sent. 

However, in an analogous art, Quick discloses a method for providing local 
authentication, wherein means for using an IK (integrity key) to generate a MAC to 
provide integrity protection (pars. 0026; the IK 310 can be used to generate a message 
authentication code MAC); and means for using a hashing function to compute a HMAC 
on the message to be sent (par. 0038; HMAC-SHA-1 scheme; HMAC is implemented in the 
subscriber identification token). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to combine the method and system of Quick with that of 
SyncML wherein means for using an IK (integrity key) to generate a MAC to provide 
integrity protection; and means for using a hashing function to compute a HMAC on the 
message to be sent to provide users with a mean for providing secure authentication to a 
subscriber roaming outside his or her home system (par. 0007). 
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• Regarding claim 64, claim 64 is similar in scope to claim 50, and is therefore 
rejected under similar rationale. 

• Regarding claim 65, claim 65 is similar in scope to claim 5 1 , and is therefore 
rejected under similar rationale. 

• Regarding claim 73, claim 73 is similar in scope to claim 63, and is therefore 
rejected under similar rationale 

• Regarding claim 74, claim 74 is similar in scope to claim 50, and is therefore 
rejected under similar rationale. 

• Regarding claim 75, claim 75 is similar in scope to claim 5 1 , and is therefore 
rejected under similar rationale. 

10. Claims 52 and 66 are rejected under 35 U.S.C. 103(a) as being unpatentable over 

SyncML, as appUed to claims 46 and 59 above, and further in view of Lahteenmaki, U.S. 
Patent Apphcation No. 2003/0028805, filed on August 03, 2001. 

• Regarding claim 52, SyncML discloses the method according to claim 46. 
SyncML does not explicitly disclose the authentication method is WPKI or WIM 

authentication. 

However, in an analogous art, Lahteenmaki discloses a method for managing 

network service access and enrolment, wherein the authentication method is WPKI or 
WIM authentication (par. 0038; WAP Public key Infrastructure (WPKI) provides a manner 
of enabling the trust relationships needed for authentication of servers and clients). 
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Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to combine the method and system of Lahteenmaki with that 
of SyncML wherein the authentication method is WPKI or WIM authentication to provide 
users with a means for managing user access and enrollment for secure network services 
(par. 0001). 

• Regarding claim 66, claim 66 is similar in scope to claim 52, and is therefore 
rejected under similar rationale. 

1 1 . Claims 53 and 76 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
SyncML, as appUed to claims 46, 59, and 69 above, and further in view of Iran et al. 
(hereinafter "Iran"), U.S. Patent Application No. 2003/0033524, filed on August 13, 2001. 

• Regarding claim 53, SyncML the method according to claim 46. 
SyncML does not explicitly disclose the authentication method is Secureld or 

Safe Word authentication. 

However, in an analogous art, Tran discloses a wireless portal system, wherein 
the authentication method is Secureld or Safe Word authentication (par. 0052; the 
authentication modules may also include LDAP authentication, secure ID, radius 
authentication, etc.). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to combine the method and system of Tran with that of 
SyncML wherein the authentication method is Secureld or Safe Word authentication to 
provide access to any type of service from any type of device from anywhere and to 
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provide content suitable for these devices without incurring substantial cost overhead (par. 
0008). 

• Regarding claim 76, SyncML discloses the server according to claim 24. 
SyncML does not explicitly disclose the authentication method is Secureld, 

SafeWord, WPKI and/or WIM authentication. 

However, in an analogous art, Tran discloses a wireless portal system, wherein 
the authentication method is Secureld, SafeWord, WPKI and/or WIM authentication (par. 
0052; the authentication modules may also include LDAP authentication, secure ID, radius 
authentication, etc.). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to combine the method and system of Tran with that of 
SyncML wherein the authentication method is Secureld, SafeWord, WPKI and/or WIM 
authentication to provide access to any type of service from any type of device from 
anywhere and to provide content suitable for these devices without incurring substantial 
cost overhead (par. 0008). 

12. Claim 58 is rejected under 35 U.S.C. 103(a) as being unpatentable over SyncML and 
Lahteenmaki, as applied to claim 52 above, and in view of Quick, Jr. et al. (hereinafter 
"Quick"), U.S. Patent Application No. 2002/0091933, filed on May 22, 2001, and fiirther in 
view of Beatson, U.S. Patent Application No. 2003/0056100, filed on September 14, 2001. 

• Regarding claim 58, SyncML and Lahteenmaki disclose the method according 
to claim 52. 
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SyncML and Lahteenmaki do not explicitly disclose generating, at the server, an 
integrity key that is encrypted with the public key of the electronic communication 
apparatus; sending the integrity key to the electronic communication apparatus; using the 
integrity key at the electronic communication apparatus to generate MAC values; and using 
a hashing function at the electronic communication apparatus to compute a HMAC on the 
message. 

However, in an analogous art. Quick discloses a method for providing local 
authentication, wherein generating, at the server, an integrity key (par. 0024; key generator 
250 generates a cryptographic cipher key (CK) 290 and an integrity key (IK) 310); 

sending the integrity key to the electronic communication apparatus (pars. 0024 
and 0026-0027; IK 310 is conveyed to the mobile unit 220); 

using the integrity key at the electronic communication apparatus to generate 
MAC values (pars. 0026; the IK 310 can be used to generate a message authentication 
code MAC); and 

using a hashing function at the electronic communication apparatus to compute a 
HMAC on the message (par. 0038; HMAC-SHA-1 scheme; HMAC is implemented in the 
subscriber identification token). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to combine the method and system of Quick with that of 
SyncML and Lahteenmaki wherein generating, at the server, an integrity key; sending the 
integrity key to the electronic communication apparatus; using the integrity key at the 
electronic communication apparatus to generate MAC values; and using a hashing function 
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at the electronic communication apparatus to compute a HMAC on the message to provide 
users with a mean for providing secure authentication to a subscriber roaming outside his 
or her home system (par. 0007). 

SyncML, Lahteenmaki, and Quick disclose all limitations as recited above. 
SyncML, Lahteenmaki, and Quick do not explicitly disclose the integrity key is encrypted 
with the public key of the electronic communication apparatus. 

However, in an analogous art, Beatson discloses a method for authenticating a 
digitized signature for execution of an electronic document, wherein the integrity key is 
encrypted with the public key of the electronic communication apparatus (par. 0080; the 

device (seiner) encrypts the secret key (integrity key) with the public key of the destination 
host (electronic communication apparatus) and communicates the data to that host with the 
encrypted secret key). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to combine the method and system of Beatson with that of 
SyncML, Lahteenmaki, and Quick, wherein the integrity key is encrypted with the public 
key of the electronic communication apparatus to provide users with a means for providing 
authenticating access to an electronic system (par. 0003). 

Conclusion 

1 3 . The prior art made of record and not relied upon is considered pertinent to applicant's 

disclosure. 

U.S. Patent No. US 6,556,820 to Le et al. 

U.S. Patent Application No. US 2003/0097592 by Adusumilli. 
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U.S. Patent Application No. US 2003/0081557 by Mettala et al. 
14. Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Luu Pham whose telephone number is 571-270-5002. The examiner 
can normally be reached on Monday through Friday, 7:30 AM - 5:00 PM (EST). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel L. Moise can be reached on 571-272-3865. The fax phone number 
for the organization where this appUcation or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status information 
for unpublished applications is available through Private PAIR only. For more information 
about the PAIR system, see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Elecfronic Business Center (EBC) at 866- 
217-9197 (toll-free). If you would like assistance from a USPTO Customer Service 
Representative or access to the automated information system, call 800-786-9199 (IN USA 
OR CANADA) or 571-272-1000. 



/Luu Pham/ 

Examiner, Art Unit 2137 
/Emmanuel L. Moise/ 

Supervisory Patent Examiner, Art Unit 2137 



